1137450 matches found
watchTowr-vs-BMC-Footprints-RCE-CVE-2025-71257-CVE-2025-71260
CVE-2025-71257 and CVE-2025-71260 BMC FootPrints Pre-Authenticated Remote Code Execution Chain BMC FootPrints Pre-Authenticated Remote Code Execution Chain Detection Artifact Generator Tool Description This Detection Artifact Generator verifies if BMC FootPrints instance is vulnerable to...
varlib-cve-2025-66034
fontTools varLib CVE-2025-66034 Exploit This repo doesn't introduce a new vulnerability. This is a Proof-of-concept exploit for CVE-2025-66034 affecting the fontTools varLib variable font generation pipeline. The vulnerability allows attackers to control the output filename inside a crafted...
shai-hulud-scan
shai-hulud-scan A Claude Code skill that scans machines for indicators of compromise IOCs from the Mini Shai-Hulud supply chain worm CVE-2026-45321, CVSS 9.6. What is Mini Shai-Hulud? A self-propagating supply chain worm that compromised 170+ npm/PyPI packages on May 11, 2026 - including...
CVE-2025-47812
CVE-2025-47812 This is a Proof of Concept PoC of the Wing FTP Server Exploit CVE-2025-47812 Description Wing FTP Server versions prior to 7.4.4 suffered a Remote Code Execution RCE vulnerability as a result of the insecure treatment of the username parameter. When we are allowed to login in the...
CVE-2025-20260-POC
CVE-2025-20260 EXPLOIT This is a proof of concept for CVE-2025-20260. This is a vulnerability in the ClamAV software's PDF scanning processes. By sending a specially crafted, malicious PDF file it is possible to cause a buffer overflow, resulting in a denial of service or arbitrary code execution...
CVE-2026-18796
Any application that uses external QSPI flash for encrypted XIP on nRF5340 and relies on that encryption for confidentiality and/or integrity of the externally stored code. No specific nRF Connect SDK version is the root cause; the weakness is in the on-the-fly decryption scheme...
CVE-2026-20841
CVE-2026-20841 - Windows Notepad Remote Code Execution RCE Security Research & Technical Analysis Repository β οΈ This repository is intended for educational, defensive, and research purposes only. π Overview CVE-2026-20841 is a critical Remote Code Execution RCE vulnerability affecting Microsoft...
docker-lab-cve-2017-5638-cve-2021-41773
Laboratorio de Atacante: CVE-2017-5638 & CVE-2021-41773 Un laboratorio de emulaciΓ³n de ataques basado en Docker con 7 hosts, diseΓ±ado para demostrar una cadena de eliminaciΓ³n de mΓΊltiples etapas, movimiento lateral y detecciΓ³n de IDS multipunto. Resumen Este laboratorio simula un entorno de red...
CVE-2026-2796-and-CVE-2026-2768-escape-the-wasm-box
CVE-2026-2796 + CVE-2026-2768 β Escape the Wasm Box Full-chain Firefox exploitation research: a WebAssembly type confusion for renderer code execution , chained toward a parent-process bug for a sandbox escape. Both bugs were fixed in Firefox 148 MFSA-2026-13; the target here is a Firefox...
CVE-2025-6440
CVE-2025-6440 β WordPress WooCommerce Dynamic Pricing & Discounts Plugin Overview This repository contains a Python proof-of-concept PoC script for testing an unauthenticated file upload vulnerability affecting the WordPress WooCommerce Dynamic Pricing & Discounts plugin. β οΈ This project is...
By-Poloss..-..CVE-2017-20251
CVE-2017-20251: InyecciΓ³n de CΓ³digo PHP en el Plugin Insert PHP TΓtulo de la Vulnerabilidad InyecciΓ³n de CΓ³digo PHP sin AutenticaciΓ³n a travΓ©s del Procesamiento de Shortcodes en el Plugin Insert PHP InformaciΓ³n BΓ‘sica...
CVE-2023-6553-RCE-Exploit
π₯ CVE-2023-6553 β WordPress Backup Migration RCE Unauthenticated Remote Code Execution via PHP Filter Chain Proof of Concept exploit for CVE-2023-6553 β a critical unauthenticated RCE vulnerability in the WordPress "Backup Migration" plugin versions β€ 1.3.7. π Vulnerability Overview...
CVE-2026-21858
CVE-2026-21858 n8n Workflow Automation Platform - Remote Code Execution A security research tool for detecting CVE-2026-21858, a critical remote code execution vulnerability in the n8n workflow automation platform. Table of Contents Vulnerability Summary Affected Versions Technical Analysis...
CVE-2026-4885
CVE-2026-4885 Piotnet Addons for Elementor Pro = 7.1.70 - Unauthenticated Arbitrary File Upload β RCE Description : The Piotnet Addons for Elementor Pro plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the pafeajaxformbuilder function in all...
react2shell-test-server
Servidor de Pruebas React2Shell Un servidor de prueba para demostrar y probar la vulnerabilidad React2Shell CVE-2025-55182 DescripciΓ³n Hemos estado investigando el RCE de React2Shell CVE-2025-55182 desde que se publicΓ³, y trabajamos para prevenir esta vulnerabilidad con nuestros clientes...
CVE-2026-60004
π¨ CVE-2026-60004 - RCE Critical Remote Code Execution in Gitea via diffpatch Git Hook A critical Remote Code Execution RCE vulnerability allowing arbitrary command execution through thediffpatch API endpoint by abusing Git hook execution. π Overview CVE-2026-60004 is a Critical Remote Code...
EvilAhenk
CVE-2026-6508 EvilAhenk is a critical security vulnerability in the LiderAhenk Central Management System architecture that allows all clients to execute code with 'root' privileges on each other Unauthorized RCE & Lateral Movement. How the System Works In LiderAhenk, the management panel/central...
CVE-2026-2587-Exploit-POC
CVE-2026-2587 Exploit PoC β Eclipse GlassFish EL Injection RCE Validator Safe PoC validator for CVE-2026-2587, a critical EL Injection / RCE issue affecting Eclipse GlassFish admin console gadget handling via /common/gadgets/gadget.jsf. This tool helps security teams validate GlassFish...
CVE-2021-46076
CVE-2021-46076 Exploit Title: Vehicle Service Management System - 'Multiple' File upload Leads to Code Execution Exploit Author: SANU P.L CVE: CVE-2021-46076 CVSS: 8.8 HIGH References: https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-code-execution...
CVE-2026-18796
CVE-2026-18796 affects the nRF5340 (Nordic Semiconductor) when using external QSPI flash for encrypted XIP (eXecute In Place). The weakness lies in the on-the-fly decryption scheme , not in any specific nRF Connect SDK version, making it a side-channel leakage vulnerability. An attacker with phys...